The add pass command reads the password from the command line. Doesn't this open a completely avoidable attack vector.